Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NiEwpiQ5aXbKLi9-Su2IlL6mauA.roa
File: NiEwpiQ5aXbKLi9-Su2IlL6mauA.roa (raw, json)
Hash identifier: 29q6Jfr1O6BxoiobBFhx9KySidAzDMYQDkngMvC3vPY=
Subject key identifier: 36:21:30:A6:24:39:69:76:CA:2E:2F:7E:4A:ED:88:94:BE:A6:6A:E0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19F8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NiEwpiQ5aXbKLi9-Su2IlL6mauA.roa
Signing time: Sat 22 Oct 2022 06:13:39 +0000
ROA not before: Sat 22 Oct 2022 06:13:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 61.60.214.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6648 (0x19f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:13:39 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=362130A624396976CA2E2F7E4AED8894BEA66AE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0d:e2:d9:89:97:0c:98:a9:83:1b:c0:46:c9:
e8:07:b2:17:a1:78:74:e6:f4:ae:bc:17:ca:5b:bb:
be:23:10:f8:22:4d:df:aa:2e:18:63:d1:6b:3c:21:
26:1d:ce:ea:b3:7c:76:a4:5a:43:bc:59:d8:99:bc:
54:fd:ec:25:4e:a9:f5:6a:bb:fd:a1:9b:85:a5:d2:
02:8f:cb:80:a4:e5:47:ba:ef:1f:6a:99:07:8f:b9:
da:cc:aa:b8:2f:09:f7:b8:d9:7c:0f:79:cc:34:80:
ed:e6:07:b7:2e:b7:7e:15:84:4f:1f:84:d3:ae:c7:
b6:56:2e:44:c7:c8:24:5a:85:6e:8b:73:95:32:1e:
1f:b7:f6:be:61:14:73:57:94:ec:d6:c9:4e:a5:db:
6f:65:63:f3:37:15:30:ca:b9:81:ec:c2:8b:5f:d0:
a1:23:11:98:f5:93:1e:5d:ac:97:3e:3b:81:b0:bb:
75:b7:3b:c3:1c:97:dc:d7:ff:12:ca:12:92:58:7f:
13:41:89:f2:63:38:06:d1:4f:12:ee:49:1c:3a:d7:
05:af:08:bc:0f:0b:e3:51:9b:ea:5c:34:5c:37:d5:
17:5c:9e:12:47:19:12:2d:b2:b1:82:d3:16:49:1d:
07:a3:ea:9a:aa:13:0b:22:66:4d:dc:8f:8d:59:9f:
a3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:21:30:A6:24:39:69:76:CA:2E:2F:7E:4A:ED:88:94:BE:A6:6A:E0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NiEwpiQ5aXbKLi9-Su2IlL6mauA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.214.0/23
Signature Algorithm: sha256WithRSAEncryption
07:85:e6:b4:5a:ea:f2:cb:3d:43:0a:e1:ae:93:e5:96:dd:5b:
af:fe:cc:9e:b3:e8:48:82:00:ed:dc:b6:36:fa:9c:31:df:f5:
19:4e:9a:70:9f:31:c4:95:20:f2:ef:67:37:89:ba:d6:66:d8:
b7:2c:d8:06:67:15:81:2b:81:1f:88:31:ac:44:d0:fe:59:c5:
f1:d4:6e:cb:71:47:18:a2:ac:8c:2c:ed:c7:1f:d2:a9:2f:ee:
01:5b:f5:39:f6:02:12:3d:4e:96:fc:fc:85:78:cc:f0:5e:bd:
8f:56:3d:ff:7b:ef:32:56:10:71:bd:83:e3:60:2e:c0:2d:0e:
3e:eb:84:68:9a:96:6b:4c:dc:3f:7f:8d:90:0d:b1:61:ab:fe:
2c:dc:58:a8:8f:77:1f:ce:db:d7:71:ad:17:da:eb:df:51:95:
06:a5:6c:e7:d8:7a:56:c8:86:ea:99:a2:cf:04:10:cd:81:4a:
45:8f:39:80:9a:81:f6:e5:a9:8b:cc:12:95:62:ab:3d:a2:00:
3d:b8:59:e4:d9:89:1f:df:0f:69:74:0b:c4:0a:26:9e:af:84:
93:15:ca:0d:28:c6:e8:20:a3:16:c5:70:3d:0b:a4:2a:b1:70:
99:f7:be:83:5f:c1:f9:9e:8a:04:63:c7:93:e8:5c:3c:8e:9f:
e4:3c:1d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org